blackberry enterprise server for ibm domino-technical note · 2018. 12. 5. · syslog connection...

BlackBerry Enterprise Server for IBM Domino

Placing the BlackBerry Enterprise Server in a Segmented Network

Version: 5.0Service Pack: 4

Tech

nica

l Not

e

Published: 2014-01-16SWD-20140116164907725

Contents1 Using a segmented network to prevent the spread of malware........................................................... 42 Protecting BlackBerry Enterprise Solution communications in your organization's environment......... 5

How a BlackBerry Enterprise Server and messaging server protect a connection to each other ............................................. 5

How the BlackBerry Enterprise Server components and the BlackBerry MVS protect communication ...................................6

How the BlackBerry Collaboration Service connects to an instant messaging server and collaboration clients on devices ...... 7

3 Architecture: BlackBerry Enterprise Server components in a segmented network.............................. 84 BlackBerry Enterprise Solution connection types and port numbers................................................ 12

BlackBerry Administration Service connection types and port numbers.............................................................................. 12

BlackBerry Attachment Service connection types and port numbers...................................................................................14

BlackBerry Collaboration Service connection types and port numbers................................................................................ 15

BlackBerry Configuration Database connection types and port numbers.............................................................................17

BlackBerry Controller connection types and port numbers..................................................................................................18

BlackBerry Dispatcher connection types and port numbers................................................................................................ 19

BlackBerry Messaging Agent connection types and port numbers.......................................................................................21

BlackBerry MDS Connection Service connection types and port numbers........................................................................... 24

BlackBerry Monitoring Service connection types and port numbers.................................................................................... 25

BlackBerry Policy Service connection types and port numbers ...........................................................................................26

BlackBerry Router connection types and port numbers ......................................................................................................27

BlackBerry Synchronization Service connection types and port numbers ........................................................................... 29

IBM Domino connection types and port numbers................................................................................................................30

IBM Sametime connection type and port number............................................................................................................... 31

BlackBerry Client for use with Microsoft Office Live Communications Server 2005 connection types and port numbers....... 31

Microsoft Office Live Communications Server 2005 connection types and port numbers .................................................... 32

Novell GroupWise Messenger connection type and port number......................................................................................... 32

SNMP agent connection types and port numbers............................................................................................................... 33

Syslog connection type and port number............................................................................................................................ 34

5 Changing port numbers.................................................................................................................. 35Change the port number that BlackBerry Enterprise Server components use to connect to the BlackBerry Configuration Database......................................................................................................................................................35

Change the port number that the syslog tools use to monitor BlackBerry Enterprise Server events....................................... 36

6 Glossary .........................................................................................................................................377 Provide feedback............................................................................................................................398 Legal notice ................................................................................................................................... 40

Using a segmented network to prevent the spread of malwareTo help prevent the spread of malware in your organization’s network, you can use firewalls to divide your organization’s network or LAN into segments to create a segmented network. Each segment can manage the network traffic for a specific BlackBerry Enterprise Solution component. A segmented network is designed to improve the security and performance of the segments by filtering out data that is not sent to the correct segment.

To configure the BlackBerry Enterprise Solution in a segmented network, you must install each BlackBerry Enterprise Solution component on a computer that is separate from the computers that host other components and then place each computer in its own network segment. If you configure the BlackBerry Enterprise Solution in a segmented network, you create an architecture that is designed to prevent the spread of potential attacks from one computer that hosts a component to another computer within your organization’s LAN. A segmented network architecture is designed to isolate attacks and contain them on one computer. To permit communication with other components, when you install each component in its own segment, you open only the port numbers that the components use.

The BlackBerry Enterprise Server and components, with the exception of the BlackBerry Router, do not support installation in a DMZ. For more information about configuring the BlackBerry Router in the DMZ, see Placing the BlackBerry Router in the DMZ.

For more information about the port numbers that the components use, see the BlackBerry Enterprise Server Administration Guide.

1

Technical Note Using a segmented network to prevent the spread of malware

4

Protecting BlackBerry Enterprise Solution communications in your organization's environment

How a BlackBerry Enterprise Server and messaging server protect a connection to each otherA BlackBerry Enterprise Server is designed to connect to the following messaging servers in a highly secure manner.

Messaging server Description

IBM Domino The BlackBerry Enterprise Server and the Domino server communicate using the Notes RPC protocol.

A user who activates a BlackBerry device when the device is connected to a computer can encrypt data that is in transit between the Domino server and a Notes Inbox.

For more information, see the online help for Domino.

Microsoft Exchange The BlackBerry Enterprise Server and Microsoft Exchange Server can communicate using Microsoft Exchange Web Services or the Microsoft Exchange Server RPC protocol over a MAPI connection.

When the BlackBerry Enterprise Server and Microsoft Exchange Server communicate using Microsoft Exchange Web Services they use an SSL connection.

A user can use 128-bit encryption to encrypt RPC communication over the MAPI connection between the Microsoft Exchange server and Microsoft Outlook. For

2

Technical Note Protecting BlackBerry Enterprise Solution communications in your organization's environment

5

Messaging server Description

more information about turning on encryption, see the documentation for Microsoft Exchange.

Novell GroupWise The BlackBerry Enterprise Server is designed to use a trusted application key to open a connection to the Novell GroupWise server. To generate the trusted application key, an administrator of Novell GroupWise runs the trusted application key generator, specifies the location of the primary domain of Novell GroupWise, and specifies the application name that the BlackBerry Enterprise Server can use to connect to the Novell GroupWise server. The trusted application key is a 64-byte ASCII string.

The BlackBerry Enterprise Server connects to a user’s mailbox in a highly secure manner using the trusted application key. The Novell GroupWise server verifies the trusted application key and permits the BlackBerry Enterprise Server to open a connection to the Novell GroupWise database for the user.

How the BlackBerry Enterprise Server components and the BlackBerry MVS protect communicationBlackBerry Enterprise Server components and the BlackBerry Mobile Voice System use the BlackBerry inter-process protocol to help protect the data that the components send to each other. The BlackBerry inter-process protocol uses a communication password to generate a session key that encrypts the data that the components send to each other. The BlackBerry Collaboration Service, BlackBerry MDS Connection Service, BlackBerry Policy Service, BlackBerry Synchronization Service, and BlackBerry MVS share a communication password. The BlackBerry Messaging Agent and BlackBerry Dispatcher share a different communication password. The communication passwords are designed to prevent a potentially malicious user from viewing data that the BlackBerry Enterprise Server components and the BlackBerry MVS send to each other.

When a BlackBerry Enterprise Server component or the BlackBerry MVS opens a connection to the BlackBerry Dispatcher, the BlackBerry inter-process protocol is designed to use SPEKE to generate the session key. The key generation process uses the communication password of the BlackBerry Enterprise Server component or BlackBerry MVS and generates an AES-256 encryption key, which is the session key. The BlackBerry Enterprise Server components and BlackBerry MVS use the session key to encrypt the data that the BlackBerry Enterprise Server components and BlackBerry MVS sends to other BlackBerry Enterprise Server components that share the same communication password.


6

How the BlackBerry Collaboration Service connects to an instant messaging server and collaboration clients on devicesThe BlackBerry Collaboration Service is designed to connect to an instant messaging server and the collaboration clients on BlackBerry devices. If your organization’s instant messaging server is Microsoft Office Live Communications Server 2005 or Microsoft Office Communications Server 2007, the BlackBerry Collaboration Service connects to the Microsoft Office Communicator Web Access server using HTTPS or HTTP.


7

Architecture: BlackBerry Enterprise Server components in a segmented network

3

Technical Note Architecture: BlackBerry Enterprise Server components in a segmented network

8

Component Description

BlackBerry Administration Service The BlackBerry Administration Service connects to the BlackBerry Configuration Database. You can use the BlackBerry Administration Service to manage BlackBerry Enterprise Server components, user accounts, and features for BlackBerry devices.


9


BlackBerry Attachment Service The BlackBerry Attachment Service converts supported message attachments into a format that users can view on their devices.

BlackBerry Collaboration Service The BlackBerry Collaboration Service provides a connection between the instant messaging server and the enterprise instant messaging application on devices.

BlackBerry Configuration Database The BlackBerry Configuration Database is a relational database that contains the configuration data that BlackBerry Enterprise Server components use.

BlackBerry Controller The BlackBerry Controller monitors other BlackBerry Enterprise Server components and restarts them if they stop responding.

BlackBerry Dispatcher The BlackBerry Dispatcher compresses and encrypts all data that devices send and receive. The BlackBerry Dispatcher sends the data through the BlackBerry Router, to and from the wireless network.

BlackBerry Mail Store Service The BlackBerry Mail Store Service connects to the messaging servers in your organization's environment and retrieves the contact information that the BlackBerry Administration Service must use to search for user accounts on the messaging servers.

BlackBerry MDS Connection Service The BlackBerry MDS Connection Service permits users to access web content on your organization's intranet or on the Internet. The BlackBerry MDS Connection Service also permits applications on devices to connect to your organization's application and content servers to retrieve application data and updates.

BlackBerry Messaging Agent The BlackBerry Messaging Agent connects to your organization's messaging servers to provide messaging services, calendar management, contact lookups, attachment viewing, and attachment downloading. The BlackBerry Messaging Agent also generates device transport keys and acts as a gateway for the BlackBerry Synchronization Service to access organizer data on the messaging servers. The BlackBerry Messaging Agent synchronizes configuration data between the BlackBerry Configuration Database and user mailboxes.

BlackBerry Monitoring Service The BlackBerry Monitoring Service is designed to help you monitor your organization's BlackBerry Domain. You can use the BlackBerry Monitoring Service to troubleshoot issues and monitor the health of your organization's BlackBerry Domain proactively.

BlackBerry Policy Service The BlackBerry Policy Service sends IT policies and IT administration commands to devices and provisions service books. The BlackBerry Policy Service sends service books to devices to configure settings for features and components on the devices.

BlackBerry profiles database The BlackBerry profiles database is an IBM Domino database that the BlackBerry Enterprise Server for IBM Domino uses to store configuration data for user accounts.


10


BlackBerry Router The BlackBerry Router connects to the wireless network to send data to and from devices. The BlackBerry Router also sends data within your organization's network to devices that are connected to computers that host the BlackBerry Device Manager.

BlackBerry state databases The BlackBerry state databases are IBM Domino databases that the BlackBerry Enterprise Server for IBM Domino uses to store data that associates email messages that devices send or receive to corresponding email messages in the email applications of users. The data in the BlackBerry state databases supports features such as email message reconciliation, email message forwarding, email message filing, and replying with text.

BlackBerry Synchronization Service The BlackBerry Synchronization Service synchronizes organizer data between devices and the messaging servers over the wireless network.

devices Devices provides users with access to BlackBerry services such as messaging and browsing.

instant messaging servers Instant messaging servers store instant messaging accounts.

messaging servers Messaging servers receive, send, and store all email messages.

organization's application and content servers

Your organization's application server or content server provides push applications and intranet content that the BlackBerry MDS Services use to install on devices.

SNMP agent The SNMP agent monitors the SNMP queries and traps for the BlackBerry Enterprise Server components.

syslog The syslog monitors events that the BlackBerry Enterprise Server components produce.

users' computers with the BlackBerry Device Manager

The users' computers with BlackBerry Device Manager permit users to connect their devices to their computers over a serial connection or USB connection. The BlackBerry Enterprise Server uses the connection to send data between it and the devices.


11

BlackBerry Enterprise Solution connection types and port numbersThe BlackBerry Enterprise Server components authenticate the port connections over a TCP/IP or UDP/IP connection that uses SSL or TLS.

BlackBerry Administration Service connection types and port numbersItem Connection

typeDefault port number

UI where you can configure the connection

for a Microsoft SQL Server, incoming data connections from, and outgoing data connections to, the BlackBerry Configuration Database

TCP 1433 Windows registry

• On a 32-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE\Research In Motion\BlackBerry Enterprise Server\Database\Port

• On a 64-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node

4

Technical Note BlackBerry Enterprise Solution connection types and port numbers

12

Item Connection type

Default port number


\Research In Motion\BlackBerry Enterprise Server\Database\Port

incoming data connections from, and outgoing data connections to, browsers

HTTPS 443 BlackBerry Configuration Panel

incoming data connections from, and outgoing data connections to, BlackBerry Enterprise Server components

HTTP 18180 BlackBerry Configuration Panel

incoming data connections from, and outgoing data connections to, BlackBerry Enterprise Server components for HA JNDI

TCP 11100 BlackBerry Configuration Panel

incoming data connections from, and outgoing data connections to, a BlackBerry Administration Service instance for local JNDI


internal data connection TCP 18082, 18083 BlackBerry Configuration Panel

incoming data connections from, and outgoing data connections to, BlackBerry Enterprise Server components for Java RMI


incoming data connections from, and outgoing data connections to, BlackBerry Enterprise Server components for Java RMI over SSL

TLS 13843 BlackBerry Configuration Panel

internal data connection TCP 14457 BlackBerry Configuration Panel


internal data connection TLS 23843 BlackBerry Configuration Panel



13


Default port number


data connections between BlackBerry Administration Service instances

UDP multicast IP address/port

228.1.2.1/48858

228.1.2.1/48857

228.1.2.1/48855

228.1.2.5/45588

—

data connections between BlackBerry Administration Service instances using TCP ping

TCP first unused port number from 17000 to 17009; 17200 to 17209; 17100 to 17109; 17400 to 17409; 17600 to 17609 and 17800 to 17809

BlackBerry Administration Service

BlackBerry Attachment Service connection types and port numbersItem Connection



incoming document submissions from the BlackBerry Attachment Service

TCP 1900 BlackBerry Administration Service

outgoing conversion results to the BlackBerry Attachment Connector


incoming connections and outgoing connections for BlackBerry Administration Service configuration


incoming document queries from the BlackBerry Attachment Service



14


Default port number


outgoing conversion results of large attachments to the BlackBerry Attachment Connector for the BlackBerry Attachment Service


incoming data connections from, and outgoing data connections to, the BlackBerry Configuration Database that a Microsoft SQL Server database hosts

TCP 1433 (static connections only)

Windows registry


• On a 64-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Research In Motion\BlackBerry Enterprise Server\Database\Port

BlackBerry Collaboration Service connection types and port numbersItem Connection



incoming data connections from, and outgoing data connections to, the Microsoft Office Live Communications Server 2005 or Microsoft Office Communications Server 2007

HTTPS 443 BlackBerry Administration Service


15


Default port number


incoming data connections from, and outgoing data connections to, the Microsoft Office Communications Server 2007 R2 or Microsoft Lync Server 2010

TLS or MTLS 5061 BlackBerry Administration Service

incoming data connections from, and outgoing data connections to, IBM Sametime

TCP/IP 1516 BlackBerry Administration Service

incoming data connections from, and outgoing data connections to, the Novell GroupWise Messenger

SSL 8300 BlackBerry Administration Service

incoming data connections from, and outgoing data connections to, the BlackBerry Dispatcher

TCP 3201 —

incoming data connections from, and outgoing data connections to, the BlackBerry Configuration Database that a Microsoft SQL Server hosts

TCP 1433 (for static port)

Windows registry



outgoing syslog connections to the SNMP agent UDP 4071 Windows registry

• On a 32-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE\Research In Motion\BlackBerrySNMPAgent\Parameters\UDPPort


16


Default port number


• On a 64-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Research In Motion\\BlackBerrySNMPAgent\Parameters\UDPPort

BlackBerry Configuration Database connection types and port numbersItem Connection



for a Microsoft SQL Server, incoming data connections from, and outgoing data connections to, any of the following BlackBerry Enterprise Server components:

• BlackBerry Administration Service

• BlackBerry Attachment Service

• BlackBerry Collaboration Service

• BlackBerry Dispatcher

• BlackBerry MDS Connection Service

• BlackBerry Messaging Agent

• BlackBerry Policy Service

• BlackBerry Synchronization Service

TCP 1433 (for static port)

BlackBerry Configuration Panel

Windows registry


• On a 64-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Research In Motion


17


Default port number


\BlackBerry Enterprise Server\Database\Port

BlackBerry Controller connection types and port numbersItem Connection



incoming syslog connections from the BlackBerry Messaging Agent

UDP 4070 Microsoft Windows registry

• On a 32-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE\Research In Motion\BlackBerry Enterprise Server\Logging Info\Mailbox Agent\SysLogHost

• On a 64-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Research In Motion\BlackBerry Enterprise Server\Logging Info\Mailbox Agent\SysLogHost

outgoing syslog connections to the BlackBerry Messaging Agent

UDP port number that the BlackBerry Messaging

—


18


Default port number


Agent provides

BlackBerry Dispatcher connection types and port numbersItem Connection



incoming data connections from the BlackBerry Messaging Agent


• On a 32-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE\Research In Motion\BlackBerry Enterprise Server\Agents\TcpPortDispatcher

• On a 64-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Research In Motion\BlackBerry Enterprise Server\Agents\TcpPortDispatcher

incoming data connections from, and outgoing data connections to, one or more of the following BlackBerry Enterprise Server components:

• BlackBerry Collaboration Service

• BlackBerry MDS Connection Service

TCP 3201 —


19


Default port number


• BlackBerry Policy Service

• BlackBerry Synchronization Service

outgoing data connection that uses SRP to the BlackBerry Router






incoming data connection from the BlackBerry database notification system

UDP first unused port number from 4185 to 4499

—

outgoing syslog connection to the SNMP agent UDP 4071 Windows registry



20


Default port number


• On a 64-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Research In Motion\BlackBerrySNMPAgent\Parameters\UDPPort

BlackBerry Messaging Agent connection types and port numbersItem Connection



outgoing data connections to the BlackBerry Dispatcher TCP 5096 Windows registry

• On a 32-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE\Research In Motion\BlackBerry Enterprise Server\Agents\TcpPortDispatcher

• On a 64-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Research In Motion\BlackBerry Enterprise Server\Agents\TcpPortDispatcher


21


Default port number






incoming syslog connections from the BlackBerry Controller and CalHelper


—

outgoing syslog connections to the BlackBerry Controller UDP 4070 Windows registry

• On a 32-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE\Research In Motion\BlackBerry Enterprise Server\Agents\SysLogHost

• On a 64-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Research In Motion\BlackBerry Enterprise


22


Default port number


Server\Agents\SysLogHost


• On a 32-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE\Research In Motion\BlackBerry Enterprise Server\Agents\UDPPort

• On a 64-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Research In Motion\BlackBerry Enterprise Server\Agents\UDPPort

incoming data connections from the BlackBerry database notification system


—

incoming data connections from, and outgoing data connections to, the IBM Domino server, using RPC

TCP 1352 —


23

BlackBerry MDS Connection Service connection types and port numbersItem Connection



if access control for push applications is turned on, incoming connections for the HTTP listener port

HTTP 8080 BlackBerry Administration Service

if access control for push applications is turned on, incoming connections for the HTTP listener port

HTTPS 8443 BlackBerry Administration Service


TCP 3201 —






• On a 32-bit version of Windows: HKEY_LOCAL_MACHIN


24


Default port number


E\SOFTWARE\Research In Motion\BlackBerrySNMPAgent\Parameters\UDPPort


incoming data connections for reliable pushes TCP 7874 BlackBerry Administration Service

BlackBerry Monitoring Service connection types and port numbersItem Connection



for a Microsoft SQL Server, incoming data connections from, and outgoing data connections to, the BlackBerry Configuration Database and BlackBerry Monitoring Service database



HTTP 58180 —


HTTPS 8443 —

incoming data connections from, and outgoing data connections to, the BlackBerry Enterprise Server and any

SNMP 161 and 162 BlackBerry Monitoring Service console


25


Default port number


other applications that you configured the BlackBerry Monitoring Service to send SNMP traps to

internal data connection to the BlackBerry Monitoring Service Application Core


internal data connection to the BlackBerry Monitoring Service Polling Engine


internal data connection to the BlackBerry Monitoring Service Data Collection Subsystem


internal data connection to the BlackBerry Monitoring Service console


BlackBerry Policy Service connection types and port numbersItem Connection




TCP 3200 —


TCP 1433 (for the static port)

Windows registry


• On a 64-bit version of Windows: HKEY_LOCAL_MACHIN


26


Default port number


E\SOFTWARE\WOW6432Node\Research In Motion\BlackBerry Enterprise Server\Database\Port



—

BlackBerry Router connection types and port numbersItem Connection



incoming data connections from the BlackBerry Dispatcher that use SRP


Windows registry

• On a 32-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE\Research In Motion\BlackBerryRouter\ServicePort

• On a 64-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node


27


Default port number


\Research In Motion\BlackBerryRouter\ServicePort

outgoing data connections to the BlackBerry Infrastructure that use SRP


Windows registry

• On a 32-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE\Research In Motion\BlackBerryRouter\TcpPort

• On a 64-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Research In Motion\BlackBerryRouter\TcpPort

incoming data connections from, and outgoing data connections to, BlackBerry devices that use the BlackBerry Device Manager to bypass the wireless network and devices that connect using Wi-Fi

TCP 4101 BlackBerry Device Manager

Windows registry

• On a 32-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE\Research In Motion\BlackBerryRouter\DevicePort

• On a 64-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE


28


Default port number


\WOW6432Node\Research In Motion\BlackBerryRouter\DevicePort




BlackBerry Synchronization Service connection types and port numbersItem Connection




TCP 3200 —


29


Default port number








—

IBM Domino connection types and port numbersItem Connection



incoming data connections from and outgoing data connections to the IBM Domino Web server

TCP/IP 80 IBM Domino Directory

incoming data connections from and outgoing data connections to the IBM Domino Web server

SSL 443 IBM Domino Directory


30

IBM Sametime connection type and port numberItem Connection



incoming data connections from and outgoing data connections to the BlackBerry Collaboration Service

TCP/IP 1533 IBM Sametime Administration Tool

BlackBerry Client for use with Microsoft Office Live Communications Server 2005 connection types and port numbersItem Connection



incoming data connections from, and outgoing data connections to, the Microsoft Office Live Communications Server

TLS 5061 BlackBerry Configuration Panel

incoming data connections from, and outgoing data connections to, the Microsoft Office Live Communications Server



31

Microsoft Office Live Communications Server 2005 connection types and port numbersItem Connection



incoming data connections from, and outgoing data connections to, the connector for the Microsoft Office Live Communications Server

TLS 5061 Microsoft Office Live Communications Server

incoming data connections from, and outgoing data connections to, the connector for the Microsoft Office Live Communications Server

TCP 5060 Microsoft Office Live Communications Server

Novell GroupWise Messenger connection type and port numberItem Connection



incoming data connections from, and outgoing data connections to, the BlackBerry Collaboration Service

SSL 8300 Novell GroupWise server that hosts the Novell GroupWise Messaging Agent


32

SNMP agent connection types and port numbersItem Connection



incoming syslog connections from the following BlackBerry Enterprise Server components:

• BlackBerry Messaging Agent

• BlackBerry Dispatcher

• BlackBerry Router

UDP 4071 Windows registry



incoming syslog connections from SNMP queries and traps UDP 161 Windows registry

outgoing syslog connections from SNMP queries and traps TCP 162 Windows registry


33

Syslog connection type and port numberItem Connection



listener port for the BlackBerry Enterprise Server events UDP 514 Windows registry

• On a 32-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE\Research In Motion\BlackBerry Enterprise Server\Logging Info\<component>\(Default)

• On a 64-bit version of Windows: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Research In Motion\BlackBerry Enterprise Server\Logging Info\<component>\(Default)


34

Changing port numbers

Change the port number that BlackBerry Enterprise Server components use to connect to the BlackBerry Configuration DatabaseYou can change the static port number that BlackBerry Enterprise Server components use if you changed the port number that the BlackBerry Configuration Database uses after you install the BlackBerry Enterprise Server.

By default, the BlackBerry Configuration Database accepts TCP/IP connections to port 1433 on a Microsoft SQL Server. The BlackBerry Configuration Database accepts connections through ports 1024 to 65535.

1. On the computer that hosts the BlackBerry Enterprise Server component, open the BlackBerry Configuration Panel.

2. In the Database Connectivity tab, in the Use dynamic ports or specify SQL port field, type the port number.

3. Click Apply.

4. Click OK.

5. In the Windows Services, restart the appropriate service for the BlackBerry Enterprise Server component.

6. Repeat steps 1 to 5 on each computer that hosts a BlackBerry Enterprise Server component that connects to the BlackBerry Configuration Database.

5

Technical Note Changing port numbers

35

Change the port number that the syslog tools use to monitor BlackBerry Enterprise Server eventsYou can change the port number that the syslog tools listen on to monitor BlackBerry Enterprise Server events. By default, the syslog tools listen to events for the BlackBerry Enterprise Server on port 514.

1. On the computer that hosts the BlackBerry Enterprise Server component, open the Windows Registry Editor.

2. Perform one of the following actions:

• If you are running a 32-bit version of Windows, navigate to HKEY_LOCAL_MACHINE\Software\Research In Motion\BlackBerry Enterprise Server.

• If you are running a 64-bit version of Windows, navigate to HKEY_LOCAL_MACHINE\Software\WOW6432Node\Research In Motion\BlackBerry Enterprise Server.

3. In the Logging Info registry key, click a BlackBerry Enterprise Server component.

4. If the DWORD value does not exist, create a DWORD value that you name (Default).

5. Change the DWORD value to the port number that the syslog tools listen on.

6. Click OK.

7. In the Windows Services, restart the service for the BlackBerry Enterprise Server component.

Technical Note Changing port numbers

36

Glossary

AES Advanced Encryption Standard

ASCII American Standard Code for Information Interchange

BlackBerry inter-process protocol

The BlackBerry inter-process protocol is a BlackBerry proprietary protocol that generates the session key that BlackBerry Enterprise Solution components, such as the BlackBerry Enterprise Server and BlackBerry Mobile Voice System, can use to communicate in a highly securely manner with each other. The BlackBerry inter-process protocol generates the session key based on the communication password.

BlackBerry MDS BlackBerry Mobile Data System

BlackBerry MVS BlackBerry Mobile Voice System

communication password

The communication password is a password that BlackBerry Enterprise Solution components use for the BlackBerry inter-process protocol. The communication password is designed to prevent a potentially malicious user from viewing the data that the components send to each other.

DMZ A demilitarized zone (DMZ) is a neutral subnetwork outside of an organization's firewall. It exists between the trusted LAN of the organization and the untrusted external wireless network and public Internet.

HTTP Hypertext Transfer Protocol over Secure Sockets Layer

HTTPS Hypertext Transfer Protocol over Secure Sockets Layer

IP address An Internet Protocol (IP) address is an identification number that each computer or mobile device uses when it sends or receives information over a network, such as the Internet. This identification number identifies the specific computer or mobile device on the network.

IT administration command

An IT administration command is a command that you can send over the wireless network to protect sensitive information on a BlackBerry device or delete all BlackBerry device data.

IT policy An IT policy consists of various IT policy rules that control the security features and behavior of BlackBerry smartphones, BlackBerry PlayBook tablets, the BlackBerry Desktop Software, and the BlackBerry Web Desktop Manager.

IT policy rule An IT policy rule permits you to customize and control the actions that BlackBerry smartphones, BlackBerry PlayBook tablets, the BlackBerry Desktop Software, and the BlackBerry Web Desktop Manager can perform.

JNDI Java Naming and Directory Interface

6

Technical Note Glossary

37

LAN local area network

MAPI Messaging Application Programming Interface

MTLS Mutual Transport Layer Security

NetBIOS network basic input/output system

NSPI Name Service Provider Interface

PAP Push Access Protocol

RMI Remote Method Invocation

RPC remote procedure call

SMB Server Message Block

SNMP Simple Network Management Protocol

SPEKE Simple Password-authenticated Exponential Key Exchange

SQL Structured Query Language

SRP Server Routing Protocol

SSL Secure Sockets Layer

TCP/IP Transmission Control Protocol/Internet Protocol (TCP/IP) is a set of communication protocols that is used to transmit data over networks, such as the Internet.

TCP Transmission Control Protocol

TLS Transport Layer Security

UDP/IP User Datagram Protocol/Internet Protocol

UDP User Datagram Protocol

USB Universal Serial Bus

Technical Note Glossary

38

Provide feedbackTo provide feedback on this content, visit www.blackberry.com/docsfeedback.

7

Technical Note Provide feedback

39

http://www.blackberry.com/docsfeedback

Legal notice©2014 BlackBerry. All rights reserved. BlackBerry® and related trademarks, names, and logos are the property of BlackBerry Limited and are registered and/or used in the U.S. and countries around the world.

IBM, Domino, Lotus, Notes, and Sametime are trademarks of International Business Machines Corporation. Java is a trademark of Oracle and/or its affiliates. Microsoft, Lync, Outlook, SQL Server, and Windows are trademarks of Microsoft Corporation. Novell and GroupWise are trademarks of Novell, Inc. Wi-Fi is a trademark of the Wi-Fi Alliance. All other trademarks are the property of their respective owners.

This documentation including all documentation incorporated by reference herein such as documentation provided or made available at www.blackberry.com/go/docs is provided or made accessible "AS IS" and "AS AVAILABLE" and without condition, endorsement, guarantee, representation, or warranty of any kind by BlackBerry Limited and its affiliated companies ("BlackBerry") and BlackBerry assumes no responsibility for any typographical, technical, or other inaccuracies, errors, or omissions in this documentation. In order to protect BlackBerry proprietary and confidential information and/or trade secrets, this documentation may describe some aspects of BlackBerry technology in generalized terms. BlackBerry reserves the right to periodically change information that is contained in this documentation; however, BlackBerry makes no commitment to provide any such changes, updates, enhancements, or other additions to this documentation to you in a timely manner or at all.

This documentation might contain references to third-party sources of information, hardware or software, products or services including components and content such as content protected by copyright and/or third-party websites (collectively the "Third Party Products and Services"). BlackBerry does not control, and is not responsible for, any Third Party Products and Services including, without limitation the content, accuracy, copyright compliance, compatibility, performance, trustworthiness, legality, decency, links, or any other aspect of Third Party Products and Services. The inclusion of a reference to Third Party Products and Services in this documentation does not imply endorsement by BlackBerry of the Third Party Products and Services or the third party in any way.

EXCEPT TO THE EXTENT SPECIFICALLY PROHIBITED BY APPLICABLE LAW IN YOUR JURISDICTION, ALL CONDITIONS, ENDORSEMENTS, GUARANTEES, REPRESENTATIONS, OR WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION, ANY CONDITIONS, ENDORSEMENTS, GUARANTEES, REPRESENTATIONS OR WARRANTIES OF DURABILITY, FITNESS FOR A PARTICULAR PURPOSE OR USE, MERCHANTABILITY, MERCHANTABLE QUALITY, NON-INFRINGEMENT, SATISFACTORY QUALITY, OR TITLE, OR ARISING FROM A STATUTE OR CUSTOM OR A COURSE OF DEALING OR USAGE OF TRADE, OR RELATED TO THE DOCUMENTATION OR ITS USE, OR PERFORMANCE OR NON-PERFORMANCE OF ANY SOFTWARE, HARDWARE, SERVICE, OR ANY THIRD PARTY PRODUCTS AND SERVICES REFERENCED HEREIN, ARE HEREBY EXCLUDED. YOU MAY ALSO HAVE OTHER RIGHTS THAT VARY BY STATE OR PROVINCE. SOME JURISDICTIONS MAY NOT ALLOW THE EXCLUSION OR LIMITATION OF IMPLIED WARRANTIES AND CONDITIONS. TO THE EXTENT PERMITTED BY LAW, ANY IMPLIED WARRANTIES OR CONDITIONS RELATING TO THE DOCUMENTATION TO THE EXTENT THEY CANNOT BE EXCLUDED AS SET OUT ABOVE, BUT CAN BE LIMITED, ARE HEREBY LIMITED TO NINETY (90) DAYS FROM THE DATE YOU FIRST ACQUIRED THE DOCUMENTATION OR THE ITEM THAT IS THE SUBJECT OF THE CLAIM.

8

Technical Note Legal notice

40

http://www.blackberry.com/go/docs

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW IN YOUR JURISDICTION, IN NO EVENT SHALL BLACKBERRY BE LIABLE FOR ANY TYPE OF DAMAGES RELATED TO THIS DOCUMENTATION OR ITS USE, OR PERFORMANCE OR NON-PERFORMANCE OF ANY SOFTWARE, HARDWARE, SERVICE, OR ANY THIRD PARTY PRODUCTS AND SERVICES REFERENCED HEREIN INCLUDING WITHOUT LIMITATION ANY OF THE FOLLOWING DAMAGES: DIRECT, CONSEQUENTIAL, EXEMPLARY, INCIDENTAL, INDIRECT, SPECIAL, PUNITIVE, OR AGGRAVATED DAMAGES, DAMAGES FOR LOSS OF PROFITS OR REVENUES, FAILURE TO REALIZE ANY EXPECTED SAVINGS, BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION, LOSS OF BUSINESS OPPORTUNITY, OR CORRUPTION OR LOSS OF DATA, FAILURES TO TRANSMIT OR RECEIVE ANY DATA, PROBLEMS ASSOCIATED WITH ANY APPLICATIONS USED IN CONJUNCTION WITH BLACKBERRY PRODUCTS OR SERVICES, DOWNTIME COSTS, LOSS OF THE USE OF BLACKBERRY PRODUCTS OR SERVICES OR ANY PORTION THEREOF OR OF ANY AIRTIME SERVICES, COST OF SUBSTITUTE GOODS, COSTS OF COVER, FACILITIES OR SERVICES, COST OF CAPITAL, OR OTHER SIMILAR PECUNIARY LOSSES, WHETHER OR NOT SUCH DAMAGES WERE FORESEEN OR UNFORESEEN, AND EVEN IF BLACKBERRY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW IN YOUR JURISDICTION, BLACKBERRY SHALL HAVE NO OTHER OBLIGATION, DUTY, OR LIABILITY WHATSOEVER IN CONTRACT, TORT, OR OTHERWISE TO YOU INCLUDING ANY LIABILITY FOR NEGLIGENCE OR STRICT LIABILITY.

THE LIMITATIONS, EXCLUSIONS, AND DISCLAIMERS HEREIN SHALL APPLY: (A) IRRESPECTIVE OF THE NATURE OF THE CAUSE OF ACTION, DEMAND, OR ACTION BY YOU INCLUDING BUT NOT LIMITED TO BREACH OF CONTRACT, NEGLIGENCE, TORT, STRICT LIABILITY OR ANY OTHER LEGAL THEORY AND SHALL SURVIVE A FUNDAMENTAL BREACH OR BREACHES OR THE FAILURE OF THE ESSENTIAL PURPOSE OF THIS AGREEMENT OR OF ANY REMEDY CONTAINED HEREIN; AND (B) TO BLACKBERRY AND ITS AFFILIATED COMPANIES, THEIR SUCCESSORS, ASSIGNS, AGENTS, SUPPLIERS (INCLUDING AIRTIME SERVICE PROVIDERS), AUTHORIZED BLACKBERRY DISTRIBUTORS (ALSO INCLUDING AIRTIME SERVICE PROVIDERS) AND THEIR RESPECTIVE DIRECTORS, EMPLOYEES, AND INDEPENDENT CONTRACTORS.

IN ADDITION TO THE LIMITATIONS AND EXCLUSIONS SET OUT ABOVE, IN NO EVENT SHALL ANY DIRECTOR, EMPLOYEE, AGENT, DISTRIBUTOR, SUPPLIER, INDEPENDENT CONTRACTOR OF BLACKBERRY OR ANY AFFILIATES OF BLACKBERRY HAVE ANY LIABILITY ARISING FROM OR RELATED TO THE DOCUMENTATION.

Prior to subscribing for, installing, or using any Third Party Products and Services, it is your responsibility to ensure that your airtime service provider has agreed to support all of their features. Some airtime service providers might not offer Internet browsing functionality with a subscription to the BlackBerry® Internet Service. Check with your service provider for availability, roaming arrangements, service plans and features. Installation or use of Third Party Products and Services with BlackBerry's products and services may require one or more patent, trademark, copyright, or other licenses in order to avoid infringement or violation of third party rights. You are solely responsible for determining whether to use Third Party Products and Services and if any third party licenses are required to do so. If required you are responsible for acquiring them. You should not install or use Third Party Products and Services until all necessary licenses have been acquired. Any Third Party Products and Services that are provided with BlackBerry's products and services are provided as a convenience to you and are provided "AS IS" with no express or implied conditions, endorsements, guarantees, representations, or warranties of any kind by BlackBerry and BlackBerry assumes no liability whatsoever, in relation thereto. Your use of Third Party Products and Services shall be governed by and subject to you agreeing to the terms of separate licenses and other agreements applicable thereto with third parties, except to the extent expressly covered by a license or other agreement with BlackBerry.


41

Certain features outlined in this documentation require a minimum version of BlackBerry Enterprise Server, BlackBerry Desktop Software, and/or BlackBerry Device Software.

The terms of use of any BlackBerry product or service are set out in a separate license or other agreement with BlackBerry applicable thereto. NOTHING IN THIS DOCUMENTATION IS INTENDED TO SUPERSEDE ANY EXPRESS WRITTEN AGREEMENTS OR WARRANTIES PROVIDED BY BLACKBERRY FOR PORTIONS OF ANY BLACKBERRY PRODUCT OR SERVICE OTHER THAN THIS DOCUMENTATION.

Certain features outlined in this documentation might require additional development or Third Party Products and Services for access to corporate applications.

This product includes software developed by the Apache Software Foundation (www.apache.org/) and/or licensed pursuant to Apache License, Version 2.0 (www.apache.org/licenses/). For more information, see the NOTICE.txt file included with the software. Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

BlackBerry Limited2200 University Avenue EastWaterloo, OntarioCanada N2K 0A7

BlackBerry UK Limited200 Bath RoadSlough, Berkshire SL1 3XEUnited Kingdom

Published in Canada


42

http://www.apache.org

http://www.apache.org/licenses/

blackberry enterprise server for ibm domino-technical note · 2018. 12. 5. · syslog connection...

Documents